Phishing

Trend Micro researchers uncovered a sextortion scheme targeting Italian-speaking users. The scheme is notable in that the hackers are now also using Bitcoin Cash as one of their preferred cryptocurrencies.

A new report found that of 546,247 phishing attacks deployed against Office 365, 25% were able to bypass its security.

Researchers discovered hundreds of compromised CMS sites delivering malicious payloads such as Shade ransomware and phishing pages to users.

Personal health information of over 350,000 consumers were potentially compromised after nine employees of the Oregon Department of Human Services (DHS) fell victim to a phishing attack.

A business email compromise (BEC) scheme took more than $100 million from Facebook and Google. Legitimate-looking invoices, contracts and more fooled the two tech companies and they wired millions to the fraudsters over a period of years.

Google posted that they removed more than 2 billion fraudulent ads and accounts, and will release an ads policy manager in April to guide legitimate advertisers and publishers for compliant ad campaigns.

As cybersecurity technology becomes better at detecting email-based threats, attackers continue to employ leveled up social engineering tactics – such as phishing – to increase the likelihood of users falling for fraud, identity theft, or spoofing.

Researchers reported two Android malware campaigns that have more than 250 million combined installs: SimBad and Operation Sheep. Learn more about these threats and how to defend against them.

To provide organizations a comprehensive view of the email threat landscape, we look at notable occurrences of advanced email threats used by cybercriminals as well as advanced security techniques that can effectively defend against them.